jonz

So when is Piriform going to release AV?

Another update! It thinks that the install file for the newest version is a virus also Here is the message: [time 8/20/2008 9:12:11 AM: ID 14: machine xxxxx: response 8/20/2008 9:12:57 AM] The Win32/FakeAv.CX was detected in C:\...\CCSETUP210[1].EXE. Machine: xxxxx, User: xxxxx. Status: File is cured and the machine needs to reboot to complete cure. I have used CCleaner for a long time, and know for a fact that is far from a virus or trojan. I can only assume that CA has failed me again with a false positive!

Update... Every box on my network is now reporting this... Piriform should write a thank you note to CA, as they are removing the uninstall files so CCleaner cant be uninstalled =)

I am running CCleaner v.2.01.507 in a Terminal Server enviroment. It runs evertime a user logs into the TS. My eTrust ITM downloaded signatures at 7:45am... At 7:51am, when the next user logged in, the realtime scanner popped the following warnings: The Win32/FakeAv.CX was detected in C:\PROGRAM FILES\CCleaner\UNINST.EXE. Machine: xxxxx, User: xxxxxx . Status: Infected and The Win32/FakeAv.CX was detected in C:\PROGRAM FILES\CCleaner\UNINST.EXE. Machine: xxxxx, User: xxxxxx. Status: File was cured; system cure performed. Do you all think this is a false positive situation? During my googleing of this, i found some mention of false positives on the file a year or so ago.